$ rpki-client -vvf rpki.apnic.net/member_repository/A91C0C73/215E5D3A365A11EDAD10BA7AC4F9AE02/45Npup3YgJmHsja0d6144Vx1qxw.mft File: 45Npup3YgJmHsja0d6144Vx1qxw.mft (raw, json) Hash identifier: xAwqL6gpfha/FGwPR18K3fKWnPsBHva9gjPAFUamym0= Subject key identifier: 23:55:D0:26:2B:DE:5E:E5:C4:EE:B2:2C:F9:4F:CD:1F:B1:64:3C:17 Authority key identifier: E3:93:69:BA:9D:D8:80:99:87:B2:36:B4:77:AD:78:E1:5C:75:AB:1C Certificate issuer: /CN=A91C0C73/serialNumber=E39369BA9DD8809987B236B477AD78E15C75AB1C Certificate serial: 0212 Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45Npup3YgJmHsja0d6144Vx1qxw.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91C0C73/215E5D3A365A11EDAD10BA7AC4F9AE02/45Npup3YgJmHsja0d6144Vx1qxw.mft Manifest number: 020A Signing time: Fri 25 Apr 2025 01:49:08 +0000 Manifest this update: Fri 25 Apr 2025 01:49:07 +0000 Manifest next update: Fri 02 May 2025 01:49:07 +0000 Files and hashes: 1: 45Npup3YgJmHsja0d6144Vx1qxw.crl (hash: PvyuqSPMcmlymQPZS0cvzsOEGIb6v4TyslDrEKjaHxA=) 2: 3728DA229A8611EFA824F73BC4F9AE02.roa (hash: AAAVj2EMvSyDPVucy4o+cELW9sLjgfDByGDLTaDK5pQ=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91C0C73/215E5D3A365A11EDAD10BA7AC4F9AE02/45Npup3YgJmHsja0d6144Vx1qxw.crl rsync://rpki.apnic.net/member_repository/A91C0C73/215E5D3A365A11EDAD10BA7AC4F9AE02/45Npup3YgJmHsja0d6144Vx1qxw.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45Npup3YgJmHsja0d6144Vx1qxw.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Fri 02 May 2025 01:49:07 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 530 (0x212) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91C0C73, serialNumber=E39369BA9DD8809987B236B477AD78E15C75AB1C Validity Not Before: Apr 25 01:49:07 2025 GMT Not After : May 2 01:49:07 2025 GMT Subject: CN=680aea13-c041 Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:bd:cc:bd:1b:00:8e:a8:e2:49:ee:e9:0b:c9:27: 58:fb:bc:65:c0:f0:b1:1f:4f:e3:32:77:f2:16:ad: ae:d5:ba:6e:9b:b2:af:64:aa:4f:6b:e3:30:53:d8: d4:60:fe:b3:60:96:9c:95:7a:fb:80:b8:80:aa:74: 4a:0d:b0:57:72:c8:05:c1:f7:bf:dd:45:df:3d:cb: 3d:47:96:2e:a0:c4:e4:ea:52:b0:01:68:9c:05:67: f7:49:1f:0d:a6:6b:e4:d8:c1:7a:70:9f:60:6c:2d: 75:9b:33:11:f0:a2:f7:89:73:bb:74:70:e2:ba:07: b5:b3:ff:3d:4c:65:e7:02:86:fc:c4:0e:08:0e:b7: 08:bc:cd:08:a7:2c:6b:32:cb:98:98:7b:46:2d:35: 82:24:e3:ab:75:8f:43:dc:d9:d0:f0:d2:b0:da:aa: 9a:de:98:3a:13:66:26:91:37:62:b7:c0:07:0d:57: 65:44:80:e6:ea:d1:54:66:a5:4a:ff:49:8e:26:7a: ac:f1:b0:ab:e5:01:cb:94:73:73:6e:27:c9:6a:f0: be:78:8d:22:f6:73:3c:c3:50:89:1e:98:88:a3:a4: 87:3e:af:51:3e:53:df:a1:5b:2f:95:9e:2b:e9:89: 16:3c:91:0b:a2:e7:de:16:bf:86:7a:3f:01:1e:28: 46:bf Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 23:55:D0:26:2B:DE:5E:E5:C4:EE:B2:2C:F9:4F:CD:1F:B1:64:3C:17 X509v3 Authority Key Identifier: keyid:E3:93:69:BA:9D:D8:80:99:87:B2:36:B4:77:AD:78:E1:5C:75:AB:1C X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91C0C73/215E5D3A365A11EDAD10BA7AC4F9AE02/45Npup3YgJmHsja0d6144Vx1qxw.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/45Npup3YgJmHsja0d6144Vx1qxw.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91C0C73/215E5D3A365A11EDAD10BA7AC4F9AE02/45Npup3YgJmHsja0d6144Vx1qxw.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption ae:32:a7:9e:c0:eb:c0:99:d1:be:57:42:98:77:0b:01:b4:6e: 91:98:82:a6:24:3d:00:cf:8f:24:37:40:ab:e1:ee:e2:16:a1: f6:c4:1f:89:f6:e1:06:b1:3a:c6:dd:3b:13:bb:55:49:18:68: aa:c7:ee:1f:3e:2e:e8:ec:21:18:5a:d4:82:13:1c:b2:e7:c0: 9b:81:0e:b9:56:71:ae:3e:83:e4:97:85:c3:5d:38:e0:35:42: 1f:bd:c0:66:66:b8:4a:12:55:9c:62:e8:3c:f0:f1:68:6f:9e: ec:bc:c3:3a:77:f4:11:9f:f8:e0:98:38:a7:9a:44:44:09:aa: e1:ae:1b:d5:e9:37:47:3f:63:44:13:a3:6d:7a:c0:71:7d:eb: bd:52:53:f9:65:aa:53:15:02:67:06:e6:b8:3d:32:96:a4:9f: 92:e0:21:7a:3d:70:be:e7:ab:48:45:ea:82:58:e6:0f:f4:da: f1:0b:dc:8c:9c:14:fe:d4:cd:89:20:7e:b4:99:57:ea:ef:e2: 25:89:04:23:80:62:09:8a:da:26:2c:1a:8b:88:af:d1:68:83: 70:17:d6:82:1b:92:51:d0:eb:58:e1:02:dc:16:de:f6:cf:99: 43:43:c0:82:5f:5f:02:50:ea:2e:fc:ff:de:66:00:74:3f:86: 3b:d2:d7:60 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICAhIwDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx QzBDNzMxMTAvBgNVBAUTKEUzOTM2OUJBOUREODgwOTk4N0IyMzZCNDc3QUQ3OEUx NUM3NUFCMUMwHhcNMjUwNDI1MDE0OTA3WhcNMjUwNTAyMDE0OTA3WjAYMRYwFAYD VQQDEw02ODBhZWExMy1jMDQxMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAvcy9GwCOqOJJ7ukLySdY+7xlwPCxH0/jMnfyFq2u1bpum7KvZKpPa+MwU9jU YP6zYJaclXr7gLiAqnRKDbBXcsgFwfe/3UXfPcs9R5YuoMTk6lKwAWicBWf3SR8N pmvk2MF6cJ9gbC11mzMR8KL3iXO7dHDiuge1s/89TGXnAob8xA4IDrcIvM0Ipyxr MsuYmHtGLTWCJOOrdY9D3NnQ8NKw2qqa3pg6E2YmkTdit8AHDVdlRIDm6tFUZqVK /0mOJnqs8bCr5QHLlHNzbifJavC+eI0i9nM8w1CJHpiIo6SHPq9RPlPfoVsvlZ4r 6YkWPJELoufeFr+Gej8BHihGvwIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFCNV0CYr 3l7lxO6yLPlPzR+xZDwXMB8GA1UdIwQYMBaAFOOTabqd2ICZh7I2tHeteOFcdasc MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDMEM3My8yMTVFNUQzQTM2 NUExMUVEQUQxMEJBN0FDNEY5QUUwMi80NU5wdXAzWWdKbUhzamEwZDYxNDRWeDFx eHcuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyLzQ1TnB1cDNZZ0ptSHNqYTBkNjE0NFZ4MXF4dy5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD MEM3My8yMTVFNUQzQTM2NUExMUVEQUQxMEJBN0FDNEY5QUUwMi80NU5wdXAzWWdK bUhzamEwZDYxNDRWeDFxeHcubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQCuMqeewOvAmdG+V0KYdwsBtG6RmIKmJD0Az48kN0Cr4e7iFqH2xB+J 9uEGsTrG3TsTu1VJGGiqx+4fPi7o7CEYWtSCExyy58CbgQ65VnGuPoPkl4XDXTjg NUIfvcBmZrhKElWcYug88PFob57svMM6d/QRn/jgmDinmkRECarhrhvV6TdHP2NE E6NtesBxfeu9UlP5ZapTFQJnBua4PTKWpJ+S4CF6PXC+56tIReqCWOYP9NrxC9yM nBT+1M2JIH60mVfq7+IliQQjgGIJitomLBqLiK/RaINwF9aCG5JR0OtY4QLcFt72 z5lDQ8CCX18CUOou/P/eZgB0P4Y70tdg -----END CERTIFICATE-----Generated at Sat Apr 26 04:29:55 2025 by rpki-client